Privacy Policy

Effective from 2 November 2026

This policy explains how we collect and use personal data when you use borocode. We process personal data in line with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.

Information we collect

• Account: your email address and authentication data.
• API keys: key prefixes and hashes; the full key is shown once and never stored.
• Payments: order and payment references, plan, amount, status, and the date you accepted these policies. The mobile number you enter at checkout is sent to Cashfree for the payment and is not stored in our database.
• Usage logs: time, endpoint, response status, duration and the target URL you submit (cut to 500 characters).

Do not put passwords, access tokens or other secrets in submitted URLs. A target URL may contain personal data, which can then appear in your usage history.

Payments

Cashfree Payments India Pvt. Ltd. processes payment credentials such as card, UPI or bank details under its own privacy policy. We receive payment status and transaction references to activate plans, reconcile payments and handle refunds, support or disputes. We never see or store full card numbers, CVVs or UPI PINs.

Why we use it

We use information to create and secure your account, provide the Services, show usage, enforce plan limits, process payments and refunds, prevent fraud and abuse, fix problems, answer your requests and meet legal and tax obligations. We do not use it for advertising.

Sharing

We do not sell personal data. We share only what is needed with service providers that host the application and database (Supabase, Vercel), authenticate users or process payments (Cashfree), and with authorities where the law requires. Some providers may store data outside India.

Retention and security

We keep account and usage data while your account is active, and payment records for as long as tax and accounting law requires (generally 8 years). We use access controls, encrypted connections and hashed API keys, but no internet service can guarantee absolute security. If a breach affects your personal data, we will inform you and the authorities as the law requires.

Your rights

You can ask to access, correct or erase your personal data, withdraw consent, or nominate someone to act for you, by writing to the grievance officer below. We reply within 30 days. We may keep data we are legally required to keep, such as payment records. Deleting your account ends access to paid Services. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

Cookies

The dashboard uses only essential authentication cookies to keep you signed in. We do not use analytics or advertising cookies.

Changes

We may update this policy when our practices or the law change. The current version and its effective date are always published here.